Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Yui0t2kLo8cD03ijEgQkB0mcLqM.roa
File: Yui0t2kLo8cD03ijEgQkB0mcLqM.roa (raw, json)
Hash identifier: PLWVtrKzfiAIuvr9oPYXSaO7SxJ3MdI3kzbDHyoGcRI=
Subject key identifier: 62:E8:B4:B7:69:0B:A3:C7:03:D3:78:A3:12:04:24:07:49:9C:2E:A3
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 19A72CCF
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Yui0t2kLo8cD03ijEgQkB0mcLqM.roa
Signing time: Sat 01 Jan 2022 05:52:39 +0000
ROA not before: Sat 01 Jan 2022 05:52:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206403
IP address blocks: 89.223.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 430386383 (0x19a72ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 05:52:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e8b4b7690ba3c703d378a312042407499c2ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:0d:f4:34:d2:71:e1:eb:9a:47:f2:13:02:
0d:33:1b:29:df:54:39:d6:cc:26:b8:9e:c3:de:04:
58:34:48:93:f5:63:13:c3:a5:00:eb:d1:c4:b9:65:
80:40:c1:6b:f9:ee:9c:ea:d4:46:d5:c9:d5:c3:da:
c9:fc:df:dc:70:75:09:e7:84:42:31:7f:24:53:76:
4f:54:1e:e4:51:03:f3:3f:c2:da:c4:b8:2c:b7:95:
fb:84:73:67:ef:bd:5c:f8:9f:cc:ad:6b:7d:de:2f:
75:3d:c5:6c:7c:9f:99:0a:4b:9e:97:56:b0:df:51:
c3:aa:ba:77:f9:99:d1:0e:9c:fb:36:71:33:71:ab:
2b:9f:f6:90:ac:cb:53:9b:9c:c9:82:c5:ab:a5:ec:
3a:32:96:f0:df:8a:76:f0:ab:1c:d8:4a:f9:2d:9f:
88:60:b8:94:08:0b:68:d6:ca:e2:5c:b6:74:72:d3:
dd:c9:4a:21:07:ff:32:db:22:84:78:ba:c8:0c:23:
95:8f:e1:54:e8:70:09:32:53:ca:5f:4c:4e:1d:cc:
a4:6d:06:90:f5:3d:d7:68:cc:88:6f:fd:2f:4c:6c:
a4:de:b1:24:e7:2b:b4:c2:63:fd:af:27:ef:e6:64:
95:25:eb:5f:8e:43:de:93:f9:90:73:2d:32:58:6a:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E8:B4:B7:69:0B:A3:C7:03:D3:78:A3:12:04:24:07:49:9C:2E:A3
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/Yui0t2kLo8cD03ijEgQkB0mcLqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3f:ba:50:69:6a:cd:d9:08:83:a4:28:77:a7:35:69:70:06:
7f:0a:b6:6a:83:ed:df:94:a5:95:e6:22:54:97:b0:94:76:74:
6a:39:26:83:30:7a:0a:6f:cb:02:43:29:a9:6d:b0:d4:1c:94:
ad:1e:dc:e9:65:7e:11:c4:a4:70:10:25:3c:ff:02:49:ce:aa:
4e:86:aa:1c:25:14:6f:ae:f4:64:33:c3:4d:b9:2c:62:37:cc:
bd:77:83:49:26:80:5f:cc:49:82:ad:59:c0:ef:eb:0f:cf:26:
ba:85:7e:fd:6c:4a:d0:16:dc:1c:c8:e2:a5:5c:e6:86:01:fe:
21:04:75:6b:4c:11:00:e5:cd:8d:da:95:de:29:40:6c:97:f7:
57:f6:22:f1:7f:b3:28:0a:30:25:d7:c0:b9:6f:e4:0b:f2:1f:
9a:19:6b:fc:ec:26:fe:00:6d:18:b3:4e:92:42:73:3c:ae:b6:
46:7d:ef:24:c6:ef:a9:87:d8:3c:93:8d:f4:9a:58:9e:74:d8:
b1:a0:62:31:29:56:89:e7:0c:2b:95:c1:fa:6a:a3:5c:39:19:
19:6f:54:35:b6:4a:19:6b:da:5d:53:3f:35:f0:06:b1:b5:30:
f6:1d:18:7f:e0:59:d5:00:d9:3f:d1:f1:a2:6e:1b:3d:d9:ff:
d6:55:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:10 2023 by rpki-client on console-fra.rpki-client.org